From 43cde5d884e2f18a1d1b518f3da388f348ecc53a Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Thu, 24 Jul 2025 18:34:44 +0000
Subject: [PATCH] Require client cert for gw.home.foo.sh site

---
 playbooks/dna-gw.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/playbooks/dna-gw.yml b/playbooks/dna-gw.yml
index 1df1771..4f753d4 100644
--- a/playbooks/dna-gw.yml
+++ b/playbooks/dna-gw.yml
@@ -18,6 +18,7 @@
     - nginx
     - role: nginx_site
       nginx_site_name: gw.home.foo.sh
+      nginx_site_verify_client: true
       when: "'gw.home.foo.sh' in ssh_hostnames"
     - tftp
     - role: websockify